Hello experts and good day,
let’s consider a specific scenario involving a segmented Veeam Infrastructure and a Protection Group for pre-deployed Veeam Agents, when deploying them from the Veeam backup server is not the best solution for various reasons.
Now regarding the network ports that must be opened, my understanding is that apart from the network ports that must be opened to ensure proper communication between Veeam Agent Computers and Veeam backup repositories, the only port needed between Veeam Agent Computers and the Veeam Backup Server itself narrows down to TCP 10005.
Is my understanding correct ?
Thanks and Regards,
Massimiliano
-
- Service Provider
- Posts: 210
- Liked: 27 times
- Joined: Jan 24, 2012 7:56 am
- Full Name: Massimiliano Rizzi
- Contact:
-
- Product Manager
- Posts: 9525
- Liked: 2524 times
- Joined: May 13, 2017 4:51 pm
- Full Name: Fabian K.
- Location: Switzerland
- Contact:
Re: Network ports that must be opened for pre-deployed Veeam Agents
Hi Massimiliano
It seems the documentation doesn't cover port exceptions when you use "pre-installed agents".
Let me discuss with tech writers if we can tag ports which are not required by pre-installed agents.
I suggest to only open Port 10005 for Agent > backup server.
Port 10001 will become necessary when you need to do a bare metal restore. You need to decide if you want to open it now or later when you need todo the restore.
Port 2500 to 3300 would be required for our inline scan feature. Inline scan is only available for "managed by backup server" jobs. But please let me confirm that with the team.
Best,
Fabian
It seems the documentation doesn't cover port exceptions when you use "pre-installed agents".
Let me discuss with tech writers if we can tag ports which are not required by pre-installed agents.
I suggest to only open Port 10005 for Agent > backup server.
Port 10001 will become necessary when you need to do a bare metal restore. You need to decide if you want to open it now or later when you need todo the restore.
Port 2500 to 3300 would be required for our inline scan feature. Inline scan is only available for "managed by backup server" jobs. But please let me confirm that with the team.
Best,
Fabian
Product Management Analyst @ Veeam Software
-
- Service Provider
- Posts: 210
- Liked: 27 times
- Joined: Jan 24, 2012 7:56 am
- Full Name: Massimiliano Rizzi
- Contact:
Re: Network ports that must be opened for pre-deployed Veeam Agents
Hello Fabian,Hi Massimiliano
It seems the documentation doesn't cover port exceptions when you use "pre-installed agents".
Let me discuss with tech writers if we can tag ports which are not required by pre-installed agents.
I suggest to only open Port 10005 for Agent > backup server.
thanks a lot for your reply - straight to the point! That is exactly the answer I was looking for.
And yes, I agree that it might be useful to also cover this specific scenario in the documentation in order for Veeam administrators to be able to provide Network Teams/Security Teams the actual, narrowed-down, list of ports needed in such scenario.
Thanks!
Massimiliano
Who is online
Users browsing this forum: No registered users and 3 guests